WPScan reports attackers are exploiting CVE-2026-123751 in the WP Duplicate WordPress plugin, an unauthenticated upload flaw leading to remote code
SonicWall patched CVE-2026-19868, a SonicOS SSL VPN flaw that bypasses SAML MFA, and CISA added it to its KEV catalog
The UnrealIRCd team says attackers are exploiting CVE-2026-114713, a labeled-response flaw it calls the most critical issue in 15 years,
JPCERT/CC says attackers are exploiting CVE-2026-111793 in Openwave Webtop Media Transcoder, a flaw patched in December 2021 that exposes sensitive
A researcher published a working exploit for CVE-2026-57845, a CVSS 8.8 pickle deserialization flaw in Hugging Face datasets up to
A CVSS 9.9 flaw in the uucore crate of uutils coreutils let a crafted translation file inject Rust code at
A researcher released a working exploit for CVE-2026-97798, a Windows Error Reporting flaw that gives SYSTEM from a standard account,
Advisories detail ModSecurity flaw CVE-2026-104269, a WAF upload-rule bypass with a public PoC, and CVE-2026-73857, an XML crash bug. Both
IBM disclosed 208 vulnerabilities in API Connect, 47 critical and scored up to CVSS 9.9, plus a 9.8 flaw in
Brenner Base Tunnel SE confirmed unauthorized access to some data after the Everest extortion group claimed 812 GB. The company
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.